1-5Enabling Port SecurityFollow these steps to enable port security:To do... Use the command... RemarksEnter system view system-view —Enable port security port-security enable RequiredDisabled by defaultEnabling port security resets the following configurations on the ports to the defaults (shown inparentheses below):z 802.1x (disabled), port access control method (macbased), and port access control mode (auto)z MAC authentication (disabled)In addition, you cannot perform the above-mentioned configurations manually because theseconfigurations change with the port security mode automatically.z For details about 802.1x configuration, refer to the sections covering 802.1x and System-Guard.z For details about MAC authentication configuration, refer to the sections covering MACauthentication configuration.z The port security feature does not support the quick EAD deployment feature in 802.1x.z The port security feature does not support the guest VLAN feature in MAC authentication.Setting the Maximum Number of MAC Addresses Allowed on a PortPort security allows more than one user to be authenticated on a port. The number of authenticatedusers allowed, however, cannot exceed the configured upper limit.By setting the maximum number of MAC addresses allowed on a port, you canz Control the maximum number of users who are allowed to access the network through the portz Control the number of Security MAC addresses that can be added with port securityThis configuration is different from that of the maximum number of MAC addresses that can be leanedby a port in MAC address management.Follow these steps to set the maximum number of MAC addresses allowed on a port:To do... Use the command... RemarksEnter system view system-view —Enter Ethernet port view interface interface-typeinterface-number —
